Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 22: Security Update for php-horde-Horde-Auth XSS Fix

fedora
Calendar Grey July 21, 2015
Dist Fedora Esm H88
Fedora Release for php-horde-Horde-Session to resolve CSRF vulnerabilities and bolster user authentication safeguards.
**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer

Summary

The Horde_Auth package provides a common interface into the various

backends for the Horde authentication system.

Update Information:

**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer.

**Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker).

**Horde_Auth 2.1.10** * [jan] SECURITY: Don't allow to login to LDAP with an emtpy password.

**Horde_Core 2.20.6** * [jan] SECURITY: Don't allow to login with an emtpy password. * [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled.

Topics%20covered

Topics Covered

security advisory security update fedora XSS authentication php-horde Horde_Auth

Change Log

* Tue Jul 7 2015 Remi Collet - 2.1.10-1 - Update to 2.1.10 * Mon Jun 29 2015 Remi Collet - 2.1.9-1 - Update to 2.1.9

References

Fedora Update Notification FEDORA-2015-11261 2015-07-10 16:32:56
Name : php-horde-Horde-Auth Product : Fedora 22 Version : 2.1.10 Release : 1.fc22 URL : http://pear.horde.org Summary : Horde Authentication API Description : The Horde_Auth package provides a common interface into the various backends for the Horde authentication system.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Auth' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Auth
Product: Fedora 22
Version: 2.1.10
Release: 1.fc22
URL: http://pear.horde.org
Summary: Horde Authentication API

Topics%20covered

Topics Covered

security advisory security update fedora XSS authentication php-horde Horde_Auth

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here